PT-2017-11619 · Docker+1 · Docker+1

Ben Murphy

·

Publicado

2017-07-07

·

Atualizado

2019-10-09

·

CVE-2017-10940

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Joyent Smart Data Center versions prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf
Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the docker API, which does not properly validate user-supplied data, allowing for the upload of arbitrary files. An attacker can leverage this to execute arbitrary code under the context of root.
Recommendations For versions prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf, consider disabling the docker API until a patch is available to prevent the upload of arbitrary files and mitigate the risk of arbitrary code execution. Restrict access to the docker API to minimize the risk of exploitation.

Correção

Path traversal

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2017-10940
ZDI-17-453

Produtos afetados

Docker
Joyent Smartos